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DISK PACK ORDER CODES 


Hexadecimal Code Function 
0] Write 
02 Read 2 
03 Seek 
04 Sense 
05 Check-write 
07 Reserve 
09 Header Write 
OA Header Read 
OF Condition Release Interrupt 
12 Read | 
13 Select Test Mode 
Pe Release 
IF Condition Release Interrupt (and set a CIL on device release) 
38 Restore Carriage 
83 Seek (and cause a device interrupt on positioning complete or Seek timeout error) 


B3 Restore Carriage (and cause a device interrupt on positioning complete) 
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1. GENERAL DESCRIPTION 


INTRODUCTION 


The Xerox Model 7260/7261/7264 and Model 7265/7266/ 
7264 Removable Disk Storage Systems provide high-volume, 
random-access storage. Each is a moving-arm (head), 
removable-medium, rotating disk system available for use 
as secondary storage with Sigma 5-9 computers. The two 
systems provide greater capacity and performance than the 
Xerox Model 7240/7242/7246 Removable Disk Storage 
System. 


Model 7260 comprises a controller and two 45 million-byte 
disk drives, providing a starter capacity of 90 million bytes 
of storage. A maximum of 13 Model 7261 disk drives ("A" 
drives), each providing 45 million bytes, can be added to 
the system to allow a total on-line capacity of 675 million 
bytes per controller. The optional addition of one Model 1032 
controller, and a Model 1033 dual access feature for each 
drive provides dual access to the system (see Chapter 4, 
"Dual Access Considerations"). The Model 7264 disk pack, 
an 11-high, 20 surface disk pack is the removable storage 
medium. 


The Model 7265/7266/7264 system is designed for appli- 
cations requiring large on-line storage capacity. The 
Model 7265 comprises a controller and three 91 million- 
byte disk drives, providing a starter capacity of 273 mil- 
lion bytes. A maximum of 12 Model 7266 disk drives ("B" 
drives), each providing 91 million bytes of storage, can be 
added to the system to allow a total on-line capacity of 
1365 million (1 billion, 365 million) bytes of storage. 
Dual access is made possible by adding one Model 1034. 
controller, and a Model 1035 dual access feature for 
each 7266 disk drive. The removable storage medium is 
the Model 7264 disk pack. 


To use this manual effectively, the reader must be famil- 
iar with the applicable Xerox Sigma Computer Reference 
Manual, particularly the discussions of input/output instruc- 
tions and input/output operations. 


The particular features of the two removable disk systems 
include the following: 


1. Floating linear actuator — isolates carriage movement 
reaction forces from the cabinet structure. 


2. Electromagnetic head positioner — provides an average 
30 msec cylinder access time. 


3. Electro-optical tracking — optimizes head positioning 
precision. 


4. Thermal compensation — minimizes off-track errors 
caused by temperature changes. 


5. Operation and failure interlock system — assures oper- 
ational system integrity. 


6. Dual access (optional) — allows simultaneous read/read, 
read/write, or write/write on any two spindles in a 
set of 15. 


7. Hardware write-protect — assures total file protection 
of the entire spindle. 


8. Independent Seek operations — allows overlapping of 
Seek operations to minimize access times on multiple 
spindle systems. 


The added feature of the 7265/7266 system is, of course, 
an on-line file storage capacity of 1365 million bytes 
per controller. 


SYSTEM COMPONENTS 


The "A" system (7260/7261) comprises some combination 
of the following components: | 


Model Prerequisite 
No. Component Component 


7260 Disk controller withtwo 45 million- 
byte disk drive units. 


1032 Additional controller allowing 7260 
access of 7260/7261 disk drives, 1033 
if dual access feature 1033 is 
installed (optional). 


1033 Dual access feature — one re- 7260/7261 
quired for each 7260/7261 disk 
drive (optional). 

7261 Additional 45-million-byte disk 7260 


drive unit — maximum of 13 per 
7260 controller (optional). 


7264 Removable disk pack. 


The minimum configuration is one Model 7260 disk system 
(controller and two 45 million-byte disk drive units). 


Similarly, the "B" system (7265/7266) comprises some com- 
bination of the following components: 


Model Prerequisite 
No. Component Component 


7265 Disk controller with three 91 million- 
byte disk drive units. 


1034 Additional controller allowing dual 7265 
access of 7265/7266 disk drives, if 1035 
dual access feature 1035 is installed 
(optional). 
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Model Prerequisite 
No. Component Component | 
1035 Dual access feature — one required 7265/7266 


for each 7265/7266 disk drive 
(optional). 


7266 Additional 91 million-byte disk 7265 
drive unit — maximum of 12 per 
7265 controller (optional). 


7264 Removable disk pack. 


The minimum configuration is one Model 7265 disk system 
(controller and three 91 million-byte disk drive units). 


Tables 1 and 2 describe the characteristics of each system. 


Table 1. Characteristics of 7260/7261 ("A") System 


Operating Characteristics 


1024 bytes/sector 


Recording format 


11 sectors/track 


200 Hacke/uraee. 


20 recording surfaces 


Recording method Track serial 


Mode Modified frequency modu- 


lation (MFM) 


4.096 Mhz 


Recording frequency 


Rotational speed 2400 rpm 


Model 7261 spindle 
capacity (sectored) 


45,056,000 bytes 


On-line capacity 
(sectored) 


Minimum 


90,112,000 bytes 


Maximum (13 addi- 
tional units per 
controller) 


675,840,000 bytes 


Nominal access (posi- 
tioning) time 


30 msec average 


Seek 
| (10-55 msec) 


12.5 msec average 
(0-25 msec) 


Rotational latency 


t 
There are an additional three spare tracks per surface, 
to be used only if the recording surface is flawed. 
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Table 1. Characteristics of 7260/7261 ("A") System (cont. ) 
| Operating Characteristics (cont. ) 
Transfer rates 


Instantaneous 
(per sector) 


512K bytes/sec 


Average 450K bytes/sec 


(multiple sectors) 


Physical Characteristics 


Model 7260 Controller 
(standard Sigma 
cabinet) 


Height 
Width 
Depth 


Weight 


Model 7261 disk drive 


Height 
Width 
Depth 


Weight 


Environmental Characteristics 


Power requirements 


120/208 vac, 60 Hz, 
three-phase. Requires 
2750 watts power at a 

power factor of 0.7. 


Model 7260 


120/208 vac, three- 
phase, 60 Hz power 
only. Requires 989 watts 
_ power at a power factor 
of 0.7. 


Model 7261 


60° to 90°F (15> to 35°C) 


Operating temperature 


Operating humidity 25% to 80% | 


(relative) 


Table 1. ‘Ghaidcienvies of 7260/7261 ("A") System (cont.) 
Thermal dissipation | 
Model 7260 9368 btu/hr 


Model 7261 3370 btu/hr 


Cable length 


IOP to controller AO ft. maximum 


Controller to disk 
drives 160 ft. maximum 


Operating and Physical Characteristics of 
Removable Volume 


Model 7264 disk pack 
Disks/pack 


Usable recording 
surfaces/pack 


Disk surface coating magnetic oxide 


Disk surface diameter | 14 in. 


Disk pack canister 
diameter 15 in. 


Disk pack canister 
Height 


Weight 


Table 2. Characteristics of 7265/7266 ("B") System 


Operating Characteristics 


Recording format 1024 bytes/sector 

11 sectors/track 

404 feaeke/eurtace: 
20 recording surfaces 
Track serial 


Recording method 


Mode Modified frequency modu- 
lation (MFM) 


t on 
There are an additional seven spare tracks per surface, 
to be used only if the recording surface is flawed. 


Table 2. Characteristics of 7265/7266 ("B") System (cont.) 


Operating Characteristics (cont.) 


4.096 Mhz 


Recording frequency 


2400 rpm 


Rotational speed 


| Model 7266 spindle 


91,013,120 bytes 


capacity (sectored) 


On-line capacity 
(sectored) | 


Minimum 


273,039,360 bytes 


Maximum (12 addi- 
tional units per 
controller) 1,365,196,800 bytes 

Nominal access (posi- 
tioning) time 


Seek 30 msec average 


(10-55 msec) 


12.5 msec average 


(0-25 msec) 


Rotational latency 


Transfer rates 


Instantaneous (per 
sector) 512K bytes/sec 


Average (multiple 
sectors) 450K bytes/sec 


Physical Characteristics 


Model 7265 Controller 
(standard Sigma 
cabinet) 

Height 
Width 
Depth 
Weight 
Model 7266 disk drive 
Height 
Width 
Depth 


Weight 
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Table 2. Characteristics of 7265/7266 ("B") System (cont.) Table 2. Characteristics of 7265/7266 ("B") System (cont.) 


Environmental Characteristics Environmental Characteristics (cont.) 


Cable length 
Power requirements 7 
IOP to controller AO ft. maximum 


Controller to disk 
drives 160 ft. maximum 


Operating and Physical Characteristics of 
| Removable Volume 


Model 7264 


Model 7265 120/208 vac, 60 Hz, 
three-phase. Requires 
3737 watts power ata 
power factor of 0.7. 


Model 7266 120/208 vac, three- 
phase, 60 Hz power 
only. Requires 989 
watts power at a power 
factor of 0.7. 


Disk/pack mie 


Usable recording 
surfaces/pack (20 


Disk surface coating | magnetic oxide 


Disk surface diameter | 14 in. 


Operating temperature 60° to 90°F ( 15° to 35°C) 


Disk pack canister 
diameter 15 in. 


Disk pack canister 
height 5.75 in. 


Weight 14.5 |b. 


Operating humidity 
(relative) 25% to 80% 
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2. FUNCTIONAL DESCRIPTION 


DATA PRESENTATION 


Data are transferred between the controller and the I/O 
system on a four-byte interface (32-bit data path). The 
four-byte feature must be installed on the IOP. All con- 
trollers time-share the interface between the collective 
controllers and the IOP. Please note that throughout this 
manual "IOP" refers to the Multiplexor Input/Output Pro- 
cessor (MIOP) — the Xerox "A" and "B" Removable Disk 
Storage Systems do not interface with the Selector Input/ 
Output Processor (SIOP). Data are transferred between the 
controller and the disk pack unit serially, two bits at a 
time (i.e., via a two-bit data path). 


DISK SYSTEM STATES 


There are four device conditions and two device modes. 
The conditions are 


1. "Not operational". 
2. "Ready". 
3. "Busy". 


4. "Not available" (reserved for use with devices that 
are accessible to more than one controller). 


The two modes are automatic and manual. Condition 
and mode combine to define device state, of which there 
are three: one not operational and two operational. The 
latter are 


1. Ready automatic. 


2. Busy automatic. 


The initial state of the device depends on its power status. 
Complete absence of power removes the device from the 
controlling system (i.e., no address recognition). If power 
is applied to the controller, address recognition occurs 
when an I/O instruction is issued. 


For single CPU configurations, the disk pack system is 
always in the automatic mode, as long as it is in the oper- 
ational state. When dual CPUs can access a device, the 
disk system is never in automatic mode; see "Dual Access 
Considerations" in Chapter 4. 


OPERATIONAL STATES 
The disk pack system reports the "operational" state if the 


I/O address is recognized and the device is operational as 
defined below. 


1. Disk speed is within operating limits. 
2. Temperature is within operating limits. 
3. All interlocks are closed. 


4. All power is normal in the controller and disk storage 
units. 


5. No fault condition exists within a disk storage unit. 
When operational, an SIO instruction will be accepted if 
1. The addressed controller/device is ready. 


2. The device is "available" — that is, not reserved by 
another controller. 


3. No channel interrupts are pending. 


In response to the SIO, HIO, and TIO I/O instructions, 
the condition of the disk pack system at any time is returned 
to the central processor. The TDV and AIO I/O instruc- 
tions obtain other specific indications of device status 
(see "Status Response" in Chapter 3). 


READY CONDITION 


In the "ready" condition, the controller can accept an SIO 
instruction if the addressed device is available and the 
system is free of pending channel interrupts. To become 
ready, the device must be operational and there must be 
no order execution in progress or pending. 


BUSY CONDITION 
In the "busy" condition, the controller has accepted an 


SIO instruction. It will not accept a new order until the 
current order (or orders) is completed. 


UNAVAILABLE CONDITION 
In the "unavailable" condition, the device is reserved by 


another controller; therefore, it cannot accept an SIO 
instruction. 
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TRANSITIONS BETWEEN STATES 


Table 3 summarizes the state transitions and the event 
(events) required to cause them. 


Table 3. Device State Transitions 


Present State Next State 


Ready automatic | Busy automatic | Acceptance of 
| SIO instruction. 


Busy automatic Ready automatic | HIO instruction 


received, I/O 
Reset signal re- 
ceived, or oper- 
ation associated 
with last order 
completed. 


6 Data Transfer 


DATA TRANSFER 


An operation is initiated from the controlling system by 
an SIO instruction if the following qualifications are met: 


1. There is I/O address recognition. 


2. Device and controller are in "ready" condition, and 
no channel interrupt is pending. 


3. Device is "available". 


If these qualifications are met, the controller enters the 
busy condition and initiates the transfer of data to or from 
the disk pack unit as specified by the order. The data 
transfer continues until the required number of bytes have 
been transferred. The operation then terminates, and the 
device returns to the ready automatic state. 


a. 


3. PROGRAM INTERFACE 


DISK PACK ORGANIZATION 


Each disk pack (see Figures 1 and 2) comprises 11 disks with 
20 usable recording surfaces. (The outside surfaces of the 
top and bottom disks are not usable.) Each surface has its 
own read/write head mounted in a comb assembly on a mov- 
able arm; the 20 heads are aligned in the same vertical 
plane and move as a unit through the stack, although only 
one head is reading or writing at any time. Head numbers 
range from 0 through 19. 


Each recording surface is logically divided into 11 sectors 
numbered 0 through 10, and 203 (411 for drive "B") con- 
centric circles or tracks on which data are recorded. The 
tracks begin (are numbered) at the periphery of a disk and 
progress inward toward the center. Each vertically-aligned 
set of 20 tracks in the stack is referred to as a cylinder. 
Thus for drive "A" there are 203 cylinders in a disk pack, 
numbered 000 through 202; for drive "B" there are 411 cyl- 
inders, numbered 000 through 410. Cylinder 000, for 
example, comprises track 000 on surface 0, track 000 on 
surface 1, and so on through track 000 on surface 19. 


The range of values in the fields of the disk address are 


summarized as follows: 


Field_ Range for "A" Drive Range for "B" Drive 
Cylinder O- 202, 0 - 41010 

Head 0 - 1919 0 - 1919 

Sector 0- 10 0-10 


10 10 


DATA ORGANIZATION 


Data is stored in groups of 1024 bytes. Each data group 
has a unique address composed of its device, cylinder, 
head, and sector number. Each data group is preceded by 
a header containing the cylinder, head, and sector number 
for the group. The header is used for address identification 
and verification. 


HEADERS 


Before data can be written on the disk, special records 
called headers that identify the addresses of all data groups 
(sectors) must be written. The header data received from. 
the IOP (see "Header Write (X'09')", later in this chapter) 
comprises a flaw byte; head, sector, and cylinder addresses; 
and alternate head and cylinder addresses. 


Headers are used in locating the desired data group (sector) 
and in address verification when successive data groups are 
written or read. Failure to acquire a given address results 
in a verification error. When the program detects a flawed 
track, it must write a flaw mark (X'FF') in the flaw byte in 
all 11 sector headers of the track. A defective or flawed 
track is one in which an error has been consistently detected 
on successive write and then read operations. When the 
controller detects a flaw mark in a header, it terminates 
any read or write operation by indicating "unusual end". 
Note that the current sector address is not incremented for 
any unusual termination while the header is being read. 
Therefore the alternate head and cylinder addresses are 
normally obtained from the "flawed header" by issuing 

a Header Read order (see "Header Read (X'0A')", later in 
this chapter) directly after the flaw is encountered. A new 
Seek order is not required in this case. 


DATA ACCESS 


To select a device for any operation, the I/O instruction 
must contain an address specifying the device controller 
address and the device address. Both the Model 7260 
and the Model 7265 are multidevice controllers; conse- 
quently the controller address lies in the range 814 through 
F16, and device addresses in the range 0)¢ through Ey¢. 
Note that device address Fyj4 is for the controller and can 
be used for any I/O instruction intended for the controller 
alone (SIO, HIO, TIO, and TDV). 


To address a particular data group (sector) for reading or 
writing, the program must first issue a Seek order to the 
device to select the desired cylinder (move the heads 
into place), head, and sector. After reading or writing 
a sector, the controller automatically increments the 
sector address to the next sector in sequence. Upon com- 
pleting the last sector of a track, the controller sets the 
sector address to zero and increments the head address to 
the next head in sequence (in the cylinder). Thus a single 
I/O order can cause a number of sequential sectors or 
tracks to be read or written. When the end of a cylinder 
is reached, the program must issue a new Seek order to the 
controller to select the next cylinder, since the controller 
dees not automatically increment to the next cylinder. 


CHECK CHARACTERS 


The controller computes and writes a two-byte check char- 
acter at the end of each header and at the end of each 
sector data field. When a header is read, the controller 
recomputes and compares the check characters with those 
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Figure 1. 7260/7261 Disk Pack Organization 
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Figure 2. 7265/7266 Disk Pack Organization 
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read; any difference causes an "unusual end" termination. 
Similarly, when data are read, the controller also recom- 
putes and compares the check characters with those read; 
however, in this case, the controller signals "transmission 
error" and not "unusual end". (See also "I/O Fault Detec- 
tion and Recovery Actions" in Chapter 4. ) 


DEVICE ORDERS 


When the controller successfully completes the execution 
of an SIO instruction or a command chain, it makes a one- 
byte order-out service call to the IOP to obtain the I/O 
order for the next operation. 


The following list shows order decoding of the I/O orders 
described in the subsequent sections. Any other code in 
the order byte is treated as an invalid order, as is a de- 
tected order parity error, and terminates with "unusual 
end". Note that all orders to device address X'F' (except 


in a Condition Release Interrupt order or a Select Test Mode 


Order) are rejected. 


Binary Representation 


Bit Positions Hexadecimal 
Order 012345467 Code 
Header Write 00001001 X'09' 
Seek MO0O00001 1 X'83', X'03' 
Write 0000000 1 X'01' 
Check-Write 00000101 X'05' 
Header Read 00001010 X'0A' 
Read | 00010010 X'12' 
Read 2 00000010 X'02' 
Restore Carriage MO1l1001 1 X'B3', X'33' 
Reserve 00000111 X'07' 
Release 00010111 X'17' 
Condition Release 
Interrupt 000M111 1 X'1F', X'OF' 


Select Test Mode 0001001 1 X'13! 


Sense 00000100 X'04' 


The "M" represents a modifier bit that, when set, has spe- 
cific indications for any order in which it can appear. 


10 Device Orders 


HEADER WRITE (X‘09') 


The Header Write order causes the controller to consider 
all subsequent data bytes as header information. Header 
size is eight bytes. The header format is defined as follows: 


Byte 0 


Byte | Byte 2 Byte 3 


Alternate Alternate 
sector! Cylinder Head 
7 5 6 719 § 6 7 


0 12 314 5 6 710 12 314 5 6 710 1 2 314 


flaw represents flaw byte and is written with all 
ones (X'FF') in every sector header of a track 
in which a flaw is detected. If there are no flaws, 
the flaw byte contains all zeros. 


cylinder represents current cylinder address. 


head represents current head address. 


sector represents current sector address. 

alternate cylinder represents the address of an 
alternate cylinder to be used should this sector 
be marked flawed; otherwise this field is zero. 


alternate head represents the address of an alternate 
head to be used should this sector be marked 
flawed; otherwise this field is zero. 


A single Header Write order can write a maximum of one 
cylinder of headers. Header writing continues until ter- 
minated by one of the following conditions: 


1. Count-done is signaled. 


2. The device becomes "not operational". The Header 
Write terminates with an "unusual end". 


3. The address increments to an out-of-bounds address — 
the head number is past the end of the cylinder. The 
programming error (bit 2) status of TDV is indicated 
and the Header Write is terminated with "unusual 
end". 


4. A rate error (data overrun) is detected. The operation 
terminates with a "transmission error". 


5. I/O Reset occurs or an HIO instruction is executed. 
The Header Write terminates without further communi- 
cation to the IOP. 


6. IOP halt is indicated to the controller. If the terminal 
order indicating IOP halt occurs prior to the order-in, 
the controller indicates "unusual end" in the order-in 


ay 


and proceeds to the "ready" state. If the terminal 
order indicating IOP halt occurs at the order-in, the 
controller proceeds to the "ready" state without further 
communication with the IOP. 


7. An output data parity error is detected from the IOP. 
The Header Write is immediately terminated with a 
“transmission error". 


8. A write-protect signal is received from the device. 
The Header Write terminates with an "unusual end". 


SEEK (X'83',X'03') 


The Seek order alerts the controller to request a four-byte 
disk address from the IOP, as illustrated below. The con- 
troller then directs any subsequent data transmission oper- 
ation to begin at this address. 


Byte O Byte 1 Byte 2 Byte 3 
a] ine [00] tet [0m0] ee 


O04 2 314 5 6 710 1 2 314 5 6 710 12 3134 5 6 710 12 314 5 6 7 


where 


cylinder represents cylinder number and can be in 
the range 0 < cylinder < 202 for disk drive A, 
and 0 Scylinder < 410 for disk drive B. 


head represents head number and can be in the 
range 0 < head € 19 for either disk drive. 


sector represents sector number and can be in the 
range 0 <sector < 10 for either disk drive. 


Both seek forward and seek reverse operations are possible. 
The difference between any seek and successor seek is 
stored in bytes 14 and 15 of the data retrievable from 
the execution of a Sense order (see "Sense (X'04') later in 
this chapter). 


A byte count of less than four causes the controller to sig- 
nal "incorrect length" in the appropriate status byte for the 
1/O instruction, without completing the Seek operation. 
If the byte count exceeds four, the Seek operation is per- 
formed using the first four bytes transferred; however, 
"incorrect length" is still signaled. In either case, an 
"unusual end" termination occurs. 


When bit 0 (modifier bit) of the Seek order is set (X'83'), 
a device interrupt is initiated when the positioning system 
indicates positioning is complete (on-cylinder) or a Seek 
timeout error (i.e. , positioning error — heads are retracted 
to sector zero) has occurred. The interrupt call is made at 
the beginning of the sector prior to the one specified by 
the Seek operation. If the call is not acknowledged before 
the beginning of the next sector, it is withdrawn until the 
next revolution of the disk. The receipt of an SIO, HIO, 
TIO, or TDV instruction for another device causes the 


interrupt call to be withdrawn temporarily. However, if 
the controller is "busy" when the device signal is received, 
the interrupt call to the IOP is postponed until the con- 
troller is not "busy". 


Seek orders can be issued successively to several devices, 
and each device will interrupt as it completes its operation. 
After the controller has sent the last communication to the 
device to initiate the Seek operation, it executes "order-in" 
to the IOP, and proceeds to the "ready" state. The 
device then stays "busy" until the heads are in position, 
even though it is not selected by the controller. See also 
"Seek and Restore Operations" in Chapter 4. 


WRITE (X‘OT) 


The Write order causes the controller to begin writing 
data on the file at the current disk (file) address. Note 
that if the specified byte count to be written is not a 
multiple of the sector record length, “incorrect length" is 
indicated and writing does continue. Writing begins 
only after the header is read and the address verified, and 
continues until terminated by any of the conditions listed 
below: 


1. Count-done is signaled coincident with “end-of-sector" 
(i.e., after writing a record on a sector). 


2. Count-done was received, the remainder of the sector 
was written with zeros, and the check character was 
written. 


3. I/O Reset occurs or an HIO instruction is executed. 
Writing terminates and the controller immediately 
becomes "ready", without further communication with 


the IOP. 


4. A terminal order indicating IOP halt occurs in the 
order-in sequence; the controller becomes "ready" 
without further communication with the IOP. 


5. An output data parity error is detected from the IOP; 
the operation terminates with "transmission error". 


6. A data overrun is detected; the operation terminates 
with "transmission error". 


7. The disk system becomes "not operational"; termination 
indicates “unusual end". 


8. The controller head address increments past the end of 
the cylinder. The sector "unavailable" status bit 
(bit 2 of TDV status) is set to 1, and termination 
indicates "unusual end". 


9. A header flaw mark, incorrect header parity, or a 
verification error is encountered. The current sector 
address is preserved (is not incremented). Termination 
indicates "unusual end". 
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10. A write-protect signal is received from the device; 
termination indicates "unusual end". 


11. A terminal order indicating IOP halt occurred before 
order-in; the controller indicates "unusual end" in 
the order-in and becomes "ready". 


CHECK-WRITE (X’05’) 


The Check-Write order causes the controller to compare. 
bytes read from disk storage with bytes received from the 
IOP. Check-write errors terminate the operation with 
"transmission error" at the completion of the sector. Note 
that if the byte count is not a multiple of the sector 
length, “incorrect length" is indicated. 


The comparison continues until terminated by one of the 
following conditions: 


1. Count-done signal is received. 


2. The disk pack system becomes "not operational". 
Check-writing terminates with an "unusual end" 
indication. 


3. The address increments to an out-of-bounds address — 
the incremented controller head number is past the end 
of the cylinder. 


4. A rate error is detected; check-writing terminates with 
a "transmission error". 


5. Data bytes do not compare or an error is encountered 
in the data check character. The order-in indicates 
"transmission error". 


6. I/O Reset occurs or an HIO instruction is executed. 
Check-writing terminates and the controller proceeds 
immediately to "ready" without further communication 


with the IOP. 


7. IOP Halt is indicated to the controller. If the ter- 
minal order indicating IOP halt occurs prior to the 
order-in, the controller indicates "unusual end" in the 
order-in and proceeds to "ready". If the terminal 
order indicating IOP halt occurs within or after the 
order-in sequence, the controller proceeds to "ready" 
without further communication with the IOP. 


8. The controller encounters a flaw mark or incorrect 
header parity in a header, or a verification error. 
The current disk (file) address is preserved (is not 
incremented). 

9. The controller detects an IOP output parity error. 

10. An output data parity error is detected from the IOP; 


the operation terminates with "transmission error". 
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HEADER READ (X'0A’) 


The Header Read order causes the controller to start reading 
headers beginning at the current disk address. The byte 
count must specify a multiple of the header record length. 
A maximum of 220 headers (one cylinder) can be read with 
a single Header Read order. 


The Header Read continues until terminated by one of the 
following conditions: 


1. Count-done signal is received. 


2. The device becomes "not operational". The Header 
Read terminates with an "unusual end" indication. 


3. The address increments to an out-of-bounds address — 
the incremented controller head number is past the end 
of the cylinder. The illegal address fault (in byte 8 
obtained with a Sense order) is indicated, and the 
Header Read operation terminates with "unusual end". 


4. Arate error is detected. The Header Read operation 
terminates with "transmission error". 


5.  /O Reset occurs or an HIO instruction is executed. 
Header Read terminates without further communication 


to the IOP. 


6. IOP halt is indicated to the controller. If the terminal 
order indicating IOP halt occurs before the order-in, 
the controller indicates "Unusual end" in the order-in 
and proceeds to the "ready" state. If the terminal 
order indicating IOP occurs at the order-in, the 
controller becomes ready without further communication 


with the IOP. 


7. Detection of either a verification error or a header 
parity error terminates the operation with "unusual 
end" after the current record (errored header) has been 
transferred to the IOP with the current sector address 
preserved. 7 


8. Detection of a flaw mark sets bit 1 of the TDV device 
status byte and reading continues. 


READ 1 (X'12’) 


The Read 1 order causes the controller to begin reading 
bytes from the disk storage at the current disk address in 
the controller and to transmit the bytes to the IOP. Please 
note that data check byte errors are reported following the 
sector in which they occurred. Such errors are reported 
as "transmission errors" at I/O termination. Sector in- 
tegrity is determined from the check bytes written at the 
end of each sector. "Incorrect length" is set in the opera- 
tional status byte if the byte count is not a multiple of the 
sector record length. | 


Prior to reading data from the sector and sending it to the 
IOP, the controller verifies the disk address by reading 
headers until it locates the one with the requested sector 
number. If a flaw mark is detected in any header, if a 
check byte error is detected, or if cylinder, sector, or head 
numbers do not compare with those stored in registers, then 
an "unusual end" occurs and no data are read. The per- 
tinent TDV status bits are set to indicate a flaw mark, 
header check byte error, or verification error (see Table 6). 


Reading is initiated at the start of the addressed sector and 
is continued until any of the following occur: 


1. Count-done signal is received coincident with the end 
of the sector and the check character has been read 
and compared. 


2. Count-done signal is received prior to the end of the 
sector. The controller reads the remaining bytes 
(but does not transmit them to the IOP), and reads 
and compares the check characters. 


3. The disk pack system becomes "not operational". 
Reading terminates with an "unusual end". 


4. The address increments to an out-of-bounds address — 
the incremented controller head number is past the end 
of the cylinder. 


5. A rate error (data overrun) is detected. Reading ter- 
minates with a "transmission error". 


6. The controller encounters a check character that does 
not successfully compare. Termination occurs at the 
end of the sector in error (for the Read 1 order de- 
scribed in this section, or is deferred until the count 
done signal is received, as described below for Read 2). 
At read termination, "transmission error" and not "un- 
usual end" is set in the appropriate status byte for the 
I/O instruction. 


7. I/O Reset occurs or an HIO instruction is executed. 
Reading terminates and the controller proceeds imme- 
diately to "ready" without further communication with 


the IOP. 


8. IOP halt is indicated to the controller. If the terminal 
order indicating IOP halt occurs prior to the order-in, 
the controller indicates "unusual end" for the order-in 
and proceeds to "ready" without further communication 


with the IOP. 


9. <A verification error is encountered. The read opera- 
tion is terminated with "unusual end", and the current 
file address is preserved (is not incremented). 


10. The controller encounters a flaw mark or incorrect 
header parity in a header. The read operation is 
terminated with "unusual end" and the file address is 
not incremented. 


READ 2 (X'02’) 


The Read 2 order causes the controller to read and transmit 
bytes to the IOP from the disk storage at the current disk 
address in the controller. Sector data check byte errors 
are reported following the sector in which count-done 


occurs. Otherwise, the operation is exactly as described 
in the previous section, "Read 1 (X'12')". 


RESTORE CARRIAGE (X‘B3‘,X‘33’) 


The Restore Carriage order causes the controller to issue a 
return-to-zero signal to the addressed device; it is generally 
used when the exact location of the carriage becomes un- 
known. Internal registers are cleared, the heads are re- 
turned to cylinder zero, and no data bytes are transferred. 
An interrupt call is made at the beginning of the sector 
prior to sector zero if the order modifier bit is set (i.e., 
order code is X'B3'). A device interrupt is initiated when 
positioning is complete. (See also "Seek and Restore 
Operations" in Chapter 4. ) 


RESERVE (X‘07') 


For a single-CPU system, the Reserve order causes the con- 
troller to select and reserve the designated device and then 
to release it. For a dual-CPU system, this order causes the 
responsible controller to select and reserve the designated 
device. Because an SIO instruction and all orders cause 
the controller to automatically select and reserve a device, 
the use of the Reserve order is superfluous. (See also "Dual 
Access Considerations" in Chapter 4.) 


RELEASE (X‘17’) 


The Release order causes the controller to issue a release 
control signal to the addressed dual access device, thereby 
releasing that device for use by the other controller. If 
the device has only a single access capability (i.e., re- 
mains reserved to channel A), the controller still executes 
the Release order; however, no useful operation results. 
(See also "Dual Access Considerations" in Chapter 4. ) 


CONDITION RELEASE INTERRUPT (X‘1F’,X'OF’) 


The Condition Release Interrupt order is meaningful only 
for dual access systems. When a controller receives a "re- 
leased" signal (which means the other controller has re- 
leased the device), a device interrupt occurs. If the order 
modifier bit is set (i.e., order code is X'1F') a controller 
makes an interrupt request (CIL) if it receives a "released" 
signal from any device. If the modifier bit is not set (X'OF'), 
a controller does not generate any release interrupts. 


The program must use SIO device address X'F' to initiate 
this order, thereby permitting the Condition Release Inter- 
rupt mark in the controller to be set even if all devices 
are busy. 


An HIO instruction with device address X'F' resets the 
release interrupt mark and any pending release interrupts. 
A reset signal received from the IOP also resets the release 
interrupt mark. 
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SELECT TEST MODE (X'13’) 


For diagnostics only. The Select Test Mode order alerts 
the controller to request two bytes of data from the IOP 
and puts the controller in test mode. The first data byte, 
byte 0, specifies the test mode (or modes) and forced error 
conditions under which subsequent operations will be per- 
formed. The second data byte, byte 1, is a test byte 
that specifies the device type and the device diagnostic 
conditions. 


Byte O 
Bits 
012345467 


Function 
00000000 Invalid test order. 
Enter buffer test mode. 


Enter controller test mode. 


Enter device test mode. 


Force device I/O parity error. 
Force read data error. 
Force IOP input parity error. 


Force IOP output parity error. 


Byte | 

Bits Function 

0-4 Diagnostic test condition for the device. 

5-7 | Device type code: 101, (579) for disk drive A, 


and 1105 (619) for disk drive B. Required only 
for controller test mode. 


The Select Test Mode order must be issued with device 
address X'F' (the controller address). The controller can 
be released from test mode by an HIO instruction or by 
manual reset. 


BUFFER TEST MODE. 


Buffer test mode allows testing of the data path between 
the IOP and the controller. The 16-byte controller buffer 
can be filled by a Write order and read back to the IOP by 
a Read order. The controller indicates end-of-data after 
the 16th byte has been transferred. By using controller 
address X'F', no device is necessary to execute buffer test 
mode tests. 
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Enter incremental clock test mode. 


CONTROLLER TEST MODE 


Controller test mode allows testing of the controller without 
operating a single device. This mode tests approximately 
90 percent of the controller logic. All subsequent orders 
can be exercised in a normal or incremental clock mode; 
control signals to the device are blocked. For data-in 
type operations the byte counter simulates data, for write 
(data-out) operations the written data are lost. By using 
controller address X'F', no device is necessary to execute 
controller test mode tests. 


DEVICE TEST MODE 


Device test mode provides a means for performing special 
diagnostic tests of the device and controller. Al! normal 
interface and controller sequences are operative except 
that the device nonoperationa!l state does not cause se- 
quences to be terminated with "unusual end", nor does it 
prohibit use of an SIO instruction. These exceptions allow 
status to be collected from the device and device commands 
to be issued to the device while the device is nonoperative. 
The controller can be operated in an incremental clock 
mode, thereby allowing the diagnostic program to check 
each phase of a Seek operation as it occurs. 


Note that in the device test mode, "implicit reserve 

and explicit release" is in effect for the controller, thus 
allowing the diagnostic program to test "implicit reserve 
and explicit release" without actually installing a ground 
jumper (on pin 06C44) to disable the automatic "implicit 
reserve and release" feature.. (See "Dual Access Considera- 
tions" in Chapter 4. ) 


INCREMENTAL CLOCK TEST MODE 


Incremental clock test mode allows the program to step 
through the controller sequences by issuing TDV instruc- 
tions. This feature allows the diagnostic program to take 
snapshots of controller and device responses to normal oper- 
ating sequences. Each TDV with an X'F' device address 
advances the sequence one step. All other TDV device 
addresses operate in the normal test mode as described in the 
section "TDV Instruction in Test Mode", below. 


FORCE DEVICE I/O PARITY ERROR 


This feature allows a diagnostic program to test the address 
decoding logic and error reporting of any device. A "one" 
in bit 3 of the test byte (byte 0) forces a parity error in the 
output address lines to the ae vice: 


FORCE READ DATA ERROR 


This test feature allows testing of the controller's check 
byte (parity) generation and detection, and its reporting 
logic. A "one" in bit 2 of the test byte forces a one-bit 
error in a read operation. Bit positions 0 and 1 of the first 
byte of any sector being read is forced to a "zero" state. 
This condition occurs for either simulated data (Controller 
Test Mode) or data from the device (Device Test Mode). 
The forcing of data errors exercizes the parity logic in the 
controller; a check byte error detection may be exercised. 


FORCE IOP INPUT PARITY ERROR 


This feature allows a diagnostic program to test the control- 
ler's parity generator and computer reporting logic. A 
"one" in bit 1 of the test byte forces a zero on the parity 


line to the JOP. 


FORCE IOP OUTPUT PARITY ERROR 


This feature allows a diagnostic program to test the con- 
troller's parity checking and reporting logic for data trans- 
fers from the IOP. A "one" in bit 0 of the test byte forces 
the simulation of a one on the parity line from the IOP. 


TDV INSTRUCTION IN TEST MODE 


During the period the controller is in test mode, the TDV 
instruction becomes a diagnostic instruction that allows 
the CPU to monitor controller and device operations and 
to issue certain diagnostic device commands. The least 
significant four bits of the device address portion of the 
instruction points to the data source to be transferred to 
the IOP during the TDV. Device addresses 0 through B 
are used for diagnostic device commands if the controller 
is in Device Test Mode. In this case the address and status 
buses from the device are monitored for status. The actual 
device operated and tested in Device Test Mode is the one 
addressed by the last SIO, TIO, or HIO instruction. If 
the controller is in the Controller Test Mode, no communi- 
cation to the device occurs. The device command status 
and functions are obtainable from the individual device or 
system specification. 


A detailed discussion of the use of TDV under test condi- 
tions is beyond the scope of this manual. Note that should 
a program accidentally get into test mode due to a hard- 
ware error or a programming error, condition code bits 1 
and 2 (CC1 and CC2) have the values 0 and 1, respectively, 
in all responses to TIO and TDV. 


SENSE (X'04’) 


The Sense order causes the controller to transfer to the IOP 


up to 16 bytes of information that describe the controller's 
and device's current state. The sense orders are timed to 
be initiated at the start of a sector. This feature provides 
that approximately the time of one sector-period elapses 
before the start of the next sector after the current angular 
position (sector position) is transferred to the IOP. The 
16 bytes are described as follows: 


Byte 0 Byte | Byte 2 Byte 3 
item aaeee Hint oad tial mae 
0 12 314 5 6 710 12 314 5 6 7/0 3 6 710 1 2 314 5 6 7 

Byte 4 . Byte 5 Byte 6 Byte 7 

Angular ; 
M Position |Configuration | Device Status 
0 12 3914 5 6 710 12 314 5$ 6 710 12 :°3'14 5 6 7T0 3} 2 314 «5 6 7 

Byte 8 Byte 9 Byte 10 | Byte 11 
0 12314 5 6 7ZI0 1 2 314 6 7F0 45 6 710 1 2 456 7 

Byte 12 Byte 13 Byte 14 Byte 15 

Check Bytes 
0 12 314 5 6 710 1 3/14 6 740 1 2 3 


W represents write-protect bit. If set, this bit says 
the current address is write-protected. 


cylinder represents current nine-bit cylinder address | 
stored in the device. 


head represents current head address stored in the 
device. 


sector represents current sector address stored in 
the device. 


M represents modifier bit. This bit is set when 
the arm is in motion. In this case, the file is 
inaccessible. 


R represents reserve/release mode. Bit 1, if set, 
says that "implicit reserve, explicit release" is 
in effect, and if reset (zero) says "implicit reserve 
and release" is in effect. (See "Dual Access Con- 
siderations" in Chapter 4. ) 


angular position represents current angular posi- 
tion — a sector number. When angular posi- 
tion equals sector address, the data file can be 
accessed. 


configuration represents configuration data. Bit 0, 
if set, says the addressed device has the dual 
access feature. Bits 1-3 contain the device type 


code, j.e., 101. for A drive and 110, for B 
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drive. Bits 4-7 contain the device physical Byte Bit Meaning 
address — this may differ from the logical address. 


2 6 Channel address error detected. 
device status represents the diagnostic device 
status received from the device. 9 7 Missing on-sector signal from 
| device during multisector Read 
faults these two bytes contain diagnostic fault or Write operation; or missing 
data that is described below. This information read or write clock, command 
is contained within the controller and indicates strobe, or status request acknowl- 
various faults that resulted in "transmission errors" edgment from device. 
or "unusual end" terminations. These data are 
accumulative and are cleared only by execution 
of this Sense order or by manual reset. Seek modifier bits represents either Seek modifier 
bits, or Restore Carriage modifier bits. Bit 0 of 
Byte Bit Meaning byte 10 represents device address 0 and bit 6 of 
— — OC byte 1] represents device address X'E'. A "one" 
8 0 Check-write error. set in any bit position means an interrupt is pending 
when the device reaches "on-cylinder" (position- 
8 1 Data check byte error. ing is complete) or Seek timeout. 
: Pepa roe check bytes represents the last check bytes re- 
8 3 Rake: erton (dafaroverin): ceived by the controller from any device. 
8 4 Head address incremented out of difference represents the difference (absolute value) 
limits while attempting a Read or last computed by the controller during a Seek 
Write order. order execution. The least significant bit is bit 7 
of byte 15. 
8 5 Arm in motion error — Seek order 
received while device arm in 
motion. 
8 6 Order parity error detected. 
8 7 Test mode order error — invalid KEY EVENTS 


test mode, or incorrect length of 


test data bytes. The following key events can occur during a disk I/O 


operation: 


9 0 Seek address transfer verification 
comparison error detected during 
Seek, Read, Check-write or 
Write order. 2. Unusual end error condition. 


mond 


. Start of I/O. 


9 l Device "unavailable" operational 3. Channel end error condition. 
error or "not operational" signal 
detected from device by the con- 
troller, or seek error during Read 
or Write sequence. 


4. Transmission error condition. 


5. Incorrect length error condition. 


9 2 Head address verification error 
arieciey These key events are described in the following sections. 
Assume no chronological order of occurrence from the 
9 3 Sector address verification error order here presented, for none is intended. For what gen- 
detected. erally occurs is that I/O is started, and sometime sub- 
sequently terminated with an interrupt. The interrupt is 
9 4 Cyl; ee queried to determine whether it was device-generated 
ylinder address verification 


(and indicating successful completion) or generated be- 
cause of an error (unsuccessful termination), or by a 
time-out occurrence (hardware malfunction — generally 
9 5 Not defined. recoverable). | 


error detected. 
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START INPUT/OUTPUT 
An I/O operation begins with the execution of an SIO 
instruction by the controlling system. If the I/O address 
is recognized and the device is "ready" and "available", 
the controlling system sets its "I/O address recognition" 
and "SIO accepted" indicators. The device advances 
from the "ready" to the "busy" condition. It then requests 


an I/O order byte from the controlling system and proceeds 
with the operation defined by the order byte. 


UNUSUAL END CONDITIONS 
Unusual end always results in a TDV status bit being set to 
indicate a means of recovery. After an order is received, 
the detection of any of the following conditions causes the 
device to signal "unusual end" to the controlling system: 
1. An out-of-range or illegal Seek address. 
2. Receipt of Seek order while arm in motion. 


3. Invalid order or order parity error. 


4. Device becomes "not operational" while the controller 
is "busy". 


5. Incorrect header parity, or a verification error for 
devices that use headers during a Read, Write, Check- 
write, or Header Read order operation. (The current 
address is not incremented. ) 


6. IOP halt signaled. 


7. Flaw byte encountered during a Read, Write, or Check- 
write order operation. 


8. Seek timeout (positioning error) occurs when controller 
receives a Seek, Read, Write, Check-write, Header 
Read, or Header Write order. 

9. Incorrect length on Seek, Header Read, or Sense order. 

10. Device interface error detected by controller. 


11. Write-protect violation. 


12. Control signal or address IOP parity error. 


CHANNEL END CONDITIONS 
"Channel end" is signaled with each order-in. The order- 
in takes place after the occurrence of any of the following 
conditions: 


I. "Count done" signal received during a Sense order. 


2. The controller executes a Seek order to a device. 


3. The check character bytes are written in the last sector 
for a Write or Header Write order following a "count 
done" signal. 

4. Receipt of check character bytes of the last sector of 
a Header Read or Check-write order following a "count 
done" signal. 

5. Receipt and execution of a Restore Carriage, Release, 
Select Test Mode, or Condition Release Interrupt 
order. 

6. Detection of an IOP data-out parity error. 


7. Detection of data overrrun (rate error). 


8. After reading the check bytes during a Read 1 or 
Check-write order that has a "transmission error". 


9. Detection of an "unusual end" condition. 


TRANSMISSION ERROR CONDITIONS 


The controller signals "transmission error" to the controlling 
system upon detecting any of the following conditions: 


1. Failure of an end-of-sector check bytes check during 
a Read or Check-write operation. 


2. Failure of data comparison during a Check-write 
operation. 


3. Data overrun (rate error). 


4. An IOP data-out parity error. 


INCORRECT LENGTH CONDITIONS 


The controller detects "incorrect length" errors and reports 
them to the controlling system for any of the following 
conditions: 


1. A byte count other than four was specified in a Seek 
order. 


2. A byte count other than an integral multiple of the 
sector data record (1024 bytes) was specified for a 
Read, Write, or Check-write order. 


3. A byte count other than a multiple of the sector header 
record (eight bytes) was specified for a Header Write 
or a Header Read order. 

4. A byte count of 0 or greater than 16 was specified for 


a Sense order. 
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STATUS RESPONSE 


The I/O instructions can request a device to return detailed 
I/O status information when the instruction is executed. 
Detailed descriptions of the Sigma I/O instructions are in 
the Sigma Computer Reference Manuals; summary status in- 
formation is discussed in the following sections and related 
tables and figures. 


CONDITION CODES 


When an I/O instruction is executed, condition code bits 1 
and 2 are set to describe the general status of the addressed 
I/O device and controller. (Condition code 3 is also 
meaningful for an I/O instruction — when set it means 
either the status returned in the registers is not reliable or 
the status has not been returned to the registers; when reset 
(zero) it means the status information is reliable. Note, 
however, that the device and controller do not influence 
CC3 — the IOP does.) Table 4 lists the CCl and CC2 set- 


tings and their significance for the I/O instructions. 


Table 4. Condition Code Settings 


I/O address recognized and SIO 
accepted. 


I/O address recognized, SIO 


not accepted. 


Not applicable. 


I/O address not recognized. 


I/O address recognized and de- 
vice not "busy" when halt 
occurred. 


I/O address recognized and de- 
vice "busy" when halt occurred. 


HIO not accepted; controller 
"busy" with device other than 
one addressed. 


I/O address not recognized. 


I/O address recognized and SIO 
can currently be accepted. 


I/O address recognized, but SIO 


cannot be currently accepted. 


Not applicable. 


I/O address not recognized. 
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Table 4. Condition Code Settings (cont. ) 


1/O 
Instruction | CC1 | CC2 | Significance 


Yo: error recognized. 


Davies controller in test mode. 


Controller busy with a device 
other than one addressed. 


I/O address not recognized. 


Normal interrupt recognition. 


a 
Unusual condition , interrupt 
condition, or controller is 
switched to a test mode. 


Not applicable. 


No interrupt recognition. 


t e e e e e e 

An unusual condition is one in which the Seek timeout 
error, unusual end, or transmission error storage elements 
were set in the previous operation. 


DEVICE STATUS BYTE 


A device status byte is returned to the register when an I/O 
instruction is executed. This byte also describes the status 
of the addressed device and its controller, but in more de- 
tailed fashion than do CCl and CC2. The significance of 
each bit is shown in Tables 5, 6, and 7. 


The device status byte is set at the beginning of an SIO, 
TIO, or HIO instruction. It is set as the result of a TDV 
instruction. For an SIO, it is set upon receipt of the 
instruction if there is an interrupt pending. 


OPERATIONAL STATUS BYTE | 


In addition to the information returned in the device status 
byte, the operational status byte generated at the end of 

each SIO, HIO, TIO, and TDV instruction execution also 
provides indicators to the controlling system (see Table 8). 


IOP STATUS BYTE 


In place of an Operational Status Byte, an AIO instruction 
returns an IOP Status Byte in the same bit positions of the 
register. Table 9 summarizes the meanings of the settings 
of these bit positions. 


Table 5. Device Status Response for SIO, HIO, and TIO 


Bit 


Interrupt pending Set if interrupt is pending (issued, but not acknowledged by an AIO 
instruction). 


Device condition Describes the current device condition as follows: 


Device "ready". 


Device "not operational". 


Device "unavailable" (reserved by other controller). 


Device "busy". 


Mode Always set to automatic mode. 


Unusual end — Set if previous controller operation terminated with "unusual end". 


Controller condition Describes the current controller condition as follows: 
Controller "ready". 
Controller "not operational". 
Not applicable. 


Controller "busy". 


Reserved Always zero. 


Reserved Always zero. 


Flaw detection Flaw byte detected during Header Read, Write, Read, or 
Check-write. 


Programming Error Invalid order detected; illegal address (address X'F' used for orders 
other than Select Test Mode or Conditional Release Interrupt); in- 
valid Seek address; address incremented out of limits while attempt- 
ing a Read or Write order; invalid test mode; Seek order received 
while arm was in motion; first seven bits of Seek order were not 
zero; or incorrect length detected for Seek, Sense, Header Read, 
or Header Write order. 


Write protection Write-protect violation. 
Parity error (IOP) Order parity error detected; Seek address parity error detected; 


even parity received on a terminal order; or IOP detected an 
address parity error (channel address parity error). 
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Table 6. Device Status Response for TDV (cont. ) 


Bit 


Operational Error Device interface error detected; missing an on-sector signal from 
device during a multisector Read or Write; missing Read or Write 
clock, command strobe, or status request acknowledgment from the 
device; detection of Seek address transfer verification comparison 
error during Seek, Read, or Write; device unavailable error or 


"not operational" signal detected from device by the controller; 
or a Seek error during a Read or Write. 


Verification Head address verification error detected; sector address verification 
error detected; or cylinder address verification error detected while 


reading a header. 


Header check byte - Header check byte error. 


Table 7. Device and Controller Status Response for AIO 


Data overrun Data overrun (rate error) has occurred during execution of the 
previous order. 


Attention interrupt Attention interrupt acknowledged. 
Release interrupt Release interrupt acknowledged. 
Reserved Always zero. 


On-sector interrupt On-sector interrupt acknowledged. Note that either bit 4 or bit 6 
can be set — both cannot be set. 


Reserved Always zero. 
Seek timeout error Seek timeout error interrupt acknowledged. See note for bit 4. If 


interrupt bit 6 is set, program must issue a Restore Carriage order and retry 
the previous operation. 


Reserved Always zero. 


Table 8. Operational Status Byte for SIO, HIO, TIO, and TDV 


Incorrect length Incorrect length condition has occurred. 


Transmission data IOP or controller detected a parity error or data overrun in the 


error transmitted information. 


Transmisson memory Memory parity error detected during a eats /O operation since 
error last accepted SIO. 


Memory address error Nonexistent memory address detected during a chaining operation 
or a data I/O operation. 
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Table 8. Operational Status Byte for SIO, HIO, TIO, and TDV (cont. ) 


Bit | 


IOP memory error IOP detected a memory parity error while fetching a command. 


IOP control error IOP detected two successive Transfer in Channel commands. 


IOP halt | An error condition is detected that causes the IOP to issue a halt 
order to the addressed I/O device. 


SIOP busy Always zero for I/O instruction addressed to an MIOP. 


Table 9. IOP Status Byte for AIO 


Incorrect length Incorrect length condition has occurred. 


Transmission data IOP or controller detected a parity error or data overrun in trans- 
error mitted information. 


Zero byte count Zero byte count is detected and zero byte count flag is set. 
interrupt 


Channel end interrupt Device reports channel end to the IOP and the channel end flag is 
set. 


Unusual end interrupt IOP reports unusual end to the device and the unusual end flag is 
set; or the IOP signaled IOP halt to the device controller. 


Not assigned Setting is indeterminate; program should mask these bits. 
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4. PROGRAMMING CONSIDERATIONS 


SEQUENCE OF ACTIVITY 


Figures 3 through 17 summarily illustrate the sequential 
relationship of the main events that occur during disk pack 
operations. 


COMMAND CHAINING 


Command chaining is allowed during the intersector gap for 
changing the order or file address from one type to another, 
or another order of the same type. Loss of rotational 
latency may be avoided only if command chaining occurs 
between sectors 10 and 0. Chaining from a read or write 
to another read or write is not allowed if the end of the 
cylinder has been reached. At the end of a cylinder, a 
Seek or Restore Carriage order must be given before addi- 
tional data can be transferred. 


SURFACE FLAWING 


When the program determines that a sector's data field is 
unusable because of a defective surface area, it must write 
flaw marks in the headers of the sectors of the associated 
cylinder and head where flaws are detected. (Note that 
the controller is designed to flaw single sectors.) The use 
of the alternate cylinder and head assignments fields of 
these headers is, of course, optional. 


SURFACE OPERATIONS 


Sector and head addresses are automatically incremented 
after a surface operation (Read, Write, etc.); however, the 
cylinder address is never automatically incremented. The 
program must issue a Seek order to cross cylinder boundaries 
to prevent an "unusual end" condition. 


When the controller detects a flaw mark during a surface 
operation, automatic surface address incrementation is in- 
hibited to allow for an immediate Header Read operation to 
obtain the alternate address. 


Note that frequent TIO and TDV instructions during surface 
operations may cause data overrun conditions. 


SEEK AND RESTORE OPERATIONS 


The Seek operation can be performed only when the disk is 
on-cylinder. When the Seek modifier bit (bit 0) is set, an 
interrupt occurs when the minimum access position is 
reached. The interrupt can be used to maximize controller 
activity. When the modifier bit in a Restore Carriage 
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order is set, an interrupt occurs when the head has com- 
pleted movement thereby avoiding having to issue Seek or- 
ders during head movement. When Seek or Restore Carriage 
orders with the modifier bit set occur in a command list, the 
modifier bit is ignored and the on-sector interrupt is lost. 


The on-sector interrupt has a window that is one sector 
ahead of the addressed sector. Thus it is possible for 
the condition code bits CC] and CC2 of an AIO instruction 
to be set to a binary 11 configuration, indicating that no 
interrupt was recognized. 


DUAL ACCESS CONSIDERATIONS 


There are two types of dual access configurations possible: 

a single CPU with two controllers sharing a device or de- 
vices; and dual CPUs sharing a device or devices, each 
through a separate controller and with no status communica- 
tions shared between the CPUs. 


In the first case (single CPU), the disk system is always in 
automatic mode and "implicit reserve and release" is in 
effect. This means that the device is always selected and 
reserved upon acceptance of. an SIO instruction, and is not 
released until the controller goes "ready". Please note that 
it is not released during command chaining or data chaining. 
For the Restore Carriage order and Seek order, the control- 
ler automatically releases the device when the carriage 
first starts movement. This is when the controller is "ready" 
for another SIO — the device goes "on-cylinder" sometime 
later. For other operations the controller automatically re- 
leases the device at the completion of each operation (at 
the time the controller goes "ready"). If a channel program 
is used that includes Seek and Read or Write orders, the de- 
vice remains reserved throughout the operation; if a regular 
program is used that issues an SIO for each Seek and Read 
or Write order, the device is released between orders at 
channel end. Thus the Reserve and Release orders are not 
required and are effectively no-ops. If the Reserve and 
Release orders are used, they operate in this manner: an 
executed Release order first reserves the device and then 
issues a release. 


In the second case (dual CPUs) the disk system is not in the 
automatic mode and "implicit reserve, explicit release" is 
in effect. This means that the acceptance of the first SIO 
from either controller causes the pertinent controller to se- 
lect and reserve the device, and that all orders automati- 
cally reserve the device. Thus the Reserve order is not 
required and is effectively a no-op. The device remains 
reserved and must be explicitly released by some action: 
execution of a Release order, manual depression of 1”O 
RESET or SYS RESET pushbuttons on the CPU control panel, 
switching of the reserving controller to off-line, orby power 
failure or shutdown in the reserving controller. The release 
interrupt is used to control the availability of the device to 
the two systems. | 
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Figure 3. Controlling/Disk Storage System Actions 
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Data Out} 


Request byte from 
Fast Access controlling system. 
Memory (FAM) 
empty ? 


Count done? 


| Terminate operation 
Count done? p 
at end of sector. 
no 
Request controlling system 
to accept bytes. Fail Receis 
Memory (FAM) 
Terminate operation at 
end of sector. 


full ? 
Note: READ, SENSE, and HEADER READ Note: WRITE, CHECK-WRITE, SEEK, and 
are Data In operations. HEADER WRITE are Data Out operations. 


Figure 4. Data In/Data Out Operations 
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Select 


Figure 5. Reserve Order ee 
est mode. 
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after device completes 
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Figure 9. Seek Order 
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Sequence of Activity 


Read angular 
position 
counter. 


Store cylinder 
address in 
FAM. 


Store head 
address in 


FAM. 


Store sector 
address in 
FAM. 


Store device 
configuration 
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in FAM. 


no 
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Figure 10. Sense Order 
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Figure 11. Header Write Order 
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Figure 12. Header Read Order 
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Position 
Verification 
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not include sector address 
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sector is found. 
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or flaw)? 


Is this 
the addressed 
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register by one sector. 


Exit to READ, WRITE, | 
or CHECKWRITE. 


Figure 13. Position Verification 
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Figure 14. Write Order 
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Figure 15. Check-Write Order 
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Sequence of Activity 
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Figure 16. Read Orders 
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Figure 17. Condition Release Interrupt Order 


PROGRAM 1/0 INTERRUPT ENVIRONMENT 


The program establishes an I/O interrupt environment by 
setting the flags in the second word of the IOP command 
doublewords in the command lists, and by using specified 
timeout delays within software timeout routines. The rec- 
ommended software timeout delay for disk operations is a 
minimum of 2 seconds. | 


The following flags must be set: 


ICE Interrupt at Channel End. Set only in last 
command of a command list. 


TUE Interrupt at Unusual End. Set in all commands. 

HTE Halt on Transmission Error. Set in all 
commands. 

SIL | Suppress Incorrect Length. Set whenever the 


size of data transferred is not equal to the 
normal size for the operation (e.g., a Write 
operation with a byte count other than 1024). 
Thus an incorrect length indication is inhibited 
from causing’ an IOP Halt and a subsequent 
"unusual end" I/O interrupt. 


The IZC flag (Interrupt at Zero Byte Count) is not neces- 


sarily set. 


DISK SYSTEM INTERRUPT ENVIRONMENT 


The disk system interrupt environment comprises interrupts 
generated by the controller and the device. 


CONTROLLER-INITIATED INTERRUPTS 


The controller generates two types of interrupts. The first 
is the result of an IOP-generated interrupt to indicate un- 
usual end, channel end, etc. The second type is device- 
initiated and indicates Seek or Restore Carriage completed, 
device released, or attention required. The IOP interrupts 
have priority over device-initiated interrupts. The controller 
"busy" condition has priority over a device interrupt. 


Interrupts are cleared by an AIO or HIO instruction to de- 
vice address X'F' or by I/O Reset. An AIO clears only one 
interrupt whereas the I/O Reset and the HIO with device 
address X'F' clear all interrupts by clearing all device in- 
terrupt flags. An HIO to the device initiating the interrupt 
clears the interrupt. 


The various interrupts are discussed individually in the sub- 
sequent sections. 


IOP-INITIATED INTERRUPT 


The IOP can set an interrupt call (CIL) by setting data bit 0 
ina terminal order. This interrupt is cleared by an AIO or 
HIO instruction or by I/O Reset. 


ATTENTION INTERRUPT 


A device initiates an attention interrupt by setting its atten- 
tion flag (status bit 7). If the controller is not busy, it scans 
the devices for initiation of a device interrupt. If the con- 
trolier receives a TDV, TIO, HIO, or SIO instruction for 
another device, the interrupt is temporarily removed until 
the instruction is completed. An AIO or HIO to the initi- 
ating device clears the attention interrupt. 
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RELEASE INTERRUPT 


A device initiates a release interrupt when it is released by 
another controller. The controller does not respond to any 
release signals from devices unless the Condition Release 
Interrupt order first enables the release interrupt logic. If 
a TIO, TDV, HIO, or SIO instruction is issued to another 
device, the interrupt call is temporarily removed until the 
instruction is completed. An AIO or HIO to the interrupt- 
ing device clears the interrupt. 


ON-SECTOR INTERRUPT 


An on-sector interrupt indicates one of two things: a de- 
vice has completed a Seek order or a Restore Carriage order 
(bit 4 of AIO); or a Seek timeout has occurred (bit 6 of 
AIO). The device signals on-sector to the controller when 
the heads are not in motion and the head is accessing the 
sector prior to the one addressed. Before the controller will 
generate an on-sector interrupt for any device, it must re- 
ceive a Seek or a Restore Carriage order with the modifier 
bit set. An interrupt call (CIL) is set at the start of the 
sector prior to the one addressed by the order and is dropped 
at the start of the next sector if not cleared by an AIO in- 
struction. The CIL is reinitiated the next revolution, how- 
ever. An on-sector interrupt is temporarily removed by a 
TIO, TDV, HIO, or SIO to another device. An AIO, HIO, 
or I/O Reset clears it. Please note that an AIO or HIO 
clears only the single interrupt, whereas I/O Reset also 
clears pending interrupts (CIL not set). 


DISK SYSTEM ERROR DETECTION ENVIRONMENT 


Logic is provided within the controller for automatic detec- 
tion of errors in the data flow in and out of the controller. 
Included are IOP parity check, device address parity, read 
check character bytes, and file address verification. 


IOP AND CONTROLLER PARITY CHECKS 


Odd parity is generated and checked for data transfers. 
Both the IOP and the controller can drive odd parity and 
perform parity checking. On the Sigma 9 computer, parity 
checking is performed on all data transfers, single- and 
four-byte. However, on the Sigma 5-7 computers, parity 
is checked only for these specific data: seek address, sense 
bytes, headers, and single-byte transfers. 


Generally, this is what occurs (qualified by the Sigma 5-9 
restrictions just cited); The controller drives odd parity for 
all data-in transfers to the IOP for single- and four-byte 
transfers, and drives parity checking on all transfers initi- 
ating from it. Odd parity is checked for all data-out on 
the single-byte interface. If the IOP drives the parity 
check, the check includes all data transfers on single- or 
four-byte transfers. "Transmission error" indicates data 
parity errors and "unusual end" indicates order and address 
parity errors. | 


DEVICE ADDRESS PARITY 


The controller generates odd parity for the four device ad- 
dress lines; the device goes "not operational" if a parity 
error is detected. 


READ CHECK CHARACTER BYTES 


A two-byte check character is written at the end of each 
record (header or data). The controller initially computes 
and inserts these check characters, and recomputes and com- 
pares them with those read on any Read or Check-write or- 
der. "Transmission error" indicates any check byte error on 
data records, and "unusual end" indicates any check byte 
error on headers. 


FILE ADDRESS VERIFICATION 


File addresses are verified by several means. During each 
Seek, the controller automatically reads back from the de- 
vice and verifies the file address (cylinder, head, track, 
sector) and any differences. It verifies the angular position 
of the heads for multiple sector-record Read and Write orders. 
The controller also verifies file address by comparing it with 
that read in the header. Any file address verification error 
results in order termination with “unusual end". 


1/0 FAULT DETECTION AND RECOVERY ACTIONS 


The program can determine whether a disk pack I/O opera- 
tion was completed successfully or terminated due to a fault 
condition by evaluating the status response and condition 
code bits obtained by issuing AIO and TDV instructions 
after an I/O interrupt. 


The program must perform tests to determine whether the I/O 
interrupt is due to a device-generated interrupt or a channel 
end or unusual end interrupt — the two are mutually exclu- 
sive. If the status bytes received with an AIO do not indi- 
cate a device-generated interrupt, assume a channel end or 
unusual end interrupt. 


TESTS FOLLOWING DEVICE 1/0 INTERRUPTS 


The following tests can be performed after receipt of a de- 
vice interrupt to determine the type of interrupt: 


1. Seek timeout error interrupt. If AIO status bit 6 is set, 
the device has generated the Seek timeout error inter- 
rupt as a result of a hardware malfunction during head 
movement. Use recovery action 3 (see "Recovery 
Actions" later in this chapter). 


2. On-sector interrupt. If AIO status bit 4 is set, the 
device has generated the on-sector interrupt to indicate 
the addressed sector's minimum access position time, or 
to indicate head motion completion for a Restore Car- 
riage order. 
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3. Release interrupt. If AlOstatus bit 2 is set, the device, The testing described in this and the preceding section is 
operating in dual access mode, has generated an inter- applicable to all peripheral devices. If no error is found, 
rupt after its release by the other controller. device-dependent fault testing (see below) is not required. 


4. Attention interrupt. If AIO status bit 1 is set, the de- 
vice has generated an interrupt as a result of the 


depression of its manual ATTENTION pushbutton while PRIORITY OF DEVICE-DEPENDENT TESTING 
placing the device in the "operational" state (or after _ 
the device was already operational). One or more status bits may be set when a fault occurs. 


Thus to properly describe the fault, testing must be per- 
formed in a predefined sequence. Table 10 shows the test- 
TESTS FOLLOWING CHANNEL END OR UNUSUAL ing sequence priorities. 
. END INTERRUPTS 


Before performing device-dependent testing, the program 
must issue a TIO instruction to determine the state of the 
device. In case of software timeout, the TIO has already 


1. CCland CC2 are zero for an AIO instruction. been issued. 


The following tests can be performed after receipt of a 
channel end or an unusual end interrupt: 


2. AIO status bits 8, 9, and 12 are zero. 

: The recovery actions annotated in Table 10 are more thor- 
Se SSSR a oleeteron a Cae ieenO oughly described in the section subsequent to the table — 
4 


. TDV status bits 8 through 15 are zero. "Recovery Actions". 


Table 10. Xerox Removable Disk Storage Systems Testing Sequence 


Condition Release Interrupt 
Read 1, 2, Write, or Checkwrite 


Sense, Release, 
Restore Carriage 


Sequence and Summary Description Condition Code, Status Response Bits, and Detailed Information Recommended Corrective Action 


X | Header Read 


x< 


See recovery action |. 


Step 1. TDV CC1,CC2 01 


Perform if TDV CC1, CC2 400, in- Test mode. The controller has been placed in test mode due to a 
dicating TDV condition code error. hardware failure or a programming error. 


TDV CC1,CC2 10. 


See recovery action 2. 
See recovery action 4. 


See recovery action 3. 


Busy. The controller indicates it is currently "busy" with a 
device other than the one addressed; this is the result of a hard- 
ware failure. 


cs 


7 
X 


oo 2 


Step 2. TIO 5,6 - 01. See recovery action 1. 
Perform if TIO 5,6 400, indicating Not operational. The controller has sensed that a power shutdown 
controller is not "ready" immediately | is in progress or that its control memory does not respond correctly. 
following an 1/O interrupt. SS 


TIO 5,6 10. 


See recovery action 2. 


> 4 
< | 


Not defined See recovery action 4. 


See recovery action 3. 


X 
X 
ES 


TIO 5,6 11. 


See recovery action 2. 


See recovery action 4. 


Busy. The controller failed to return to the "ready" condition. 
This can occur if a command list is coded for multiple interrupts 
or if hardware malfunction prevented the controller's return to 
the "ready" condition. 


See recovery action 3. 
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Table 10. Xerox Removable Disk Storage Systems Testing Sequence (cont. ) 
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Sense, Release, 
Condition Release Interrupt 
Restore Carriage 


Header Read 
Header Write 


Recommended Corrective Action 


Sequence and Summary Description Condition Code, Status Response Bits, and Detailed Information 


x 


See recovery action 1. 


TIO 1,2 = 01 


Step 3. 


Not operational. The device has detected a hardware malfunction 
or a controller-to-device communication malfunction and has dis- 
allowed further operations to be performed on the device. 


Perform if TIO 1,2 400, indicating 
device is not "ready" immediately 
following an I/O interrupt. 


See recovery action I. 


TIO: 172-710. 


Unavailable. The device is unavailable for usage through the 
addressed controller during dual access hardware configuration. 
Its unavailability is the result of its being presently reserved by 
the other controller of the dual access pair. 


Note: This could be a normal response if a dual-CPU system 
is not using interrupts. ; 


TIO 12: is 


recovery action 2, 


recovery action 4. 


Busy. The device did not return to the "ready" condition. This 
can occur if a channel command list is coded for multiple interrupts; 
if a hardware malfunction has prevented the return to "ready"; or if 
the I/O interrupt was other than an on-sector interrupt for a Seek 
or a Restore Carriage order. 


recovery action 3. 


Step 4. TDV 11-1. See recovery action 2. 


recovery action 4. 


Perform if TDV 10,11, 12, or 
13 40, indicating IOP operation 
error. 


Memory address error. This error can occur because of programming 


errors or hardware malfunction. 


TDV 12 «1. See recovery action 2. 


recovery action 4. 


IOP memory error. This error is due to hardware malfunction. 


TDV 131. 


See recovery action 2. 


recovery action 4. 


1OP control error. This error is due to programming errors or hard- 
ware malfunctions. 


TDV 10 1. 


recovery action 2. 


recovery action 4. 


Transmission memory error. This error is due to hardware malfunction. 


Step 5. TOV 4-1. recovery action 2. 


Perform if TDV 4 #0, indicating 
parity error. 


1OP parity error. The controller has detected a data parity error 
during the data-out phase of a seek operation. 


Step 6. TOV 5: 1. 


See recovery action 2. 
See recovery action 4. 


Pl See recovery action 3. 
See recovery action 2. 


Perform if TDV 5 #0, indicating 
an operational error. 


Operational error. The controller or device (or both) has detected 
an operational error as a result of a hardware malfunction. 


Step 7. TDV2> 1. 


Perform if TDV 2 #0, indicating 
a programming error. 


Programming error. The controller has detected one of these: an 
invalid order; an illegal address or cylinder overflow; the arm in 
motion at the start of a seek operation; a byte count other than 
four for a seek operation; a byte count unequal to a multiple of 
the header size for a header operation; or an incorrect use of 
device address X'F'. : 


Step 8. 


IDV 3= 1. 


| Perfor if TDV 3 40, indicating 


a write-protect violation. 


Write-protect violation. The controller has detected that a write 
operation was about to be performed on a write-protected surface 
and has aborted the write operation. 


TDV 7 = 1. 


Step 9. See recovery action 2. 


Perform if TDV 7 40, indicating 
header parity error. 


Header parity error. The controller has detected a parity error in 
the header during address verification. 


: See recovery action 6. 
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Table 10. Xerox Removable Disk Storage Systems Testing Sequence (cont.) 


Sequence and Summary Description 
Step 10. TDV6=1. 


Perform if TDV 6 £0, indicating 
seek timeout or verification error. 


occur during head movement. 
Step 11. TDV 1=1. 


Perform if TDV 1 40, indicating 
a header flaw byte was detected. 


Step 12. TDV9=1. 


| Perform if TDV 9 7 0, indicating 


transmission data error. 


Step 13. TDV8= 1. 


Perform if TDV 8 70, indicating 
incorrect length error. 


Step 14. (Steps 1 through 13 


status malfunction. 


RECOVERY ACTIONS 


Table 10 annotates the recovery actions for the channel end 
and the unusual end interrupts by I/O order. To determine 
the correct recovery action, first determine the order (Seek, 
Sense, etc.). You may assume that for multisector opera- 
tions the failing sector can be determined and recovery 
action taken on the appropriate sector. Therefore we rec- 
ommend that read operations use the Read 1 order (order 
code X'12') to ensure that a failure is reported immediately 
following the failing sector. If the Read 2 order (X'02') is 
used, the fault indications may be attributable to a number 
of sectors, and for this reason an alternate fault testing se- 
quence may be necessary. 


In the case of command lists, a sequence of operations are 
performed before the I/O interrupt occurs and status is made 
available. When an error occurs, the command list sequence 
is terminated and the failing order can be determined from 
the TIO current command doubleword address. The pro- 
gramming system then has its choice of repeating the entire 
command list or rebuilding the command list (bypassing all 
nonfailing surface operations) to repeat the operation that 
failed. 


Perhaps it would be beneficial to give a few error defini- 
tions at this point — "soft" and "hard" read and write errors 
and seek errors. An error can be considered a read error 
only if the data were read correctly at least once after they 
were written. A soft read error is an error that occurs dur- 
ing a read operation and can be corrected as a result of one 


Condition Code, Status Response Bits, and Detailed Information 


Verification or seek timeout error. The seek address does not compare 
with the header address prior to the start of a read, write, check-write, 
or header read operation; or the on-cylinder situation has failed to 


Header flaw byte. A flaw byte has been detected in the header and 
the read, write, or check-write operation has been aborted. 


Transmission data error. The controller has detected a data error that 
may be due to a check-write comparison error, an IOP parity error, 

a data overrun (rate) error, or a data check byte comparison error. 

The IOP can set this error if it detects a data parity error during data-in. 


Incorrect length. The controller has detected that the byte count 
is not the nominal byte count for the operation being performed. 


Status inconsistent error. The device-dependent status has failed 
passed. ) to indicate the specific failure for which the device-dependent 
status checking was evoked. Consider this to be a hardware 


lease Interrupt 


Release, 
,2, Write, or Checkwrite 


Tt 


Condition Re 


Sense, 


Recommended Corrective Action 


See recovery action 2. 
See recovery action 4. 


See recovery action 3. 


See recovery action 5. 


See recovery action 6. 


See recovery action 2. 


See recovery action 4. 
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See recovery action 2. 
See recovery action 4. 
See recovery action 6. 
See recovery action 2. 
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or more reread operations (not to exceed 10). A hard read 
error is a read error that cannot be corrected during as many 
as 10 reread operations. Similarly, errors can be considered 
write errors only if a write operation is immediately followed 
by a verification by reading; only if such verification is suc- 
cessful can the data be considered error-free. A soft write 
error is one that can be corrected after one rewrite, whereas 
a hard write error is one that cannot be corrected by one 
rewrite — it is an irrecoverable error. (See "Irrecoverable 
Errors", following this section.) A seek error is declared if 
a carriage positioning operation is not completed within 

3 seconds. The verification of proper cylinder location is 
done in the controller during a subsequent Read, Write, or 
Check-write operation. 


The recovery actions are described forthwith: 


Action Description 


] Abort — operator intervention. The current opera- 
tion must be aborted and operator notification 
given that the device or controller (or both) has 
become "not operational", "unavailable", or entered 
the test mode. The operator must then perform the 
appropriate action before returning the controller 
and device to the "Operational" state. 


2 Order retry — program recovery. Issue an HIO 
instruction (in the case of controller "busy") and 
retry the operation. Repeat the HIO-retry order 
sequence 10 times before considering the fault 
irrecoverable. 
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Action Description FAULT LOGGING 


3 Order retry after Restore Carriage — program re- 
covery. Issue an HIO instruction (in the case of 
controller "busy") followed by a Restore Carriage 
order to reestablish head positional reference. 
Then retry a Seek operation followed by the orig- 
inal operation (if it was not a Seek). Repeat this 
sequence 10 times before considering the fault 
irrecoverable. 


Part of the fault recovery procedure is the obtaining and 
logging of additional failure indicators using the Sense op- 
eration. The sense data comprise 16 bytes of status and 
fault information. Place bytes 0 through 15 in the error log 
along with the I/O instruction status. The two reasons for 
obtaining and logging the sense data are 


The specific failure information provided in sense 
bytes 8 and 9 are valuable for hardware repair. The 
physical device on which the faults occurred, regard- 
less of the device's logical address, can be determined 
from byte 5. 


4 Order retry after Seek — program recovery. Issue 
an HIO instruction (for controller "busy') followed 
by a Seek order to reestablish the surface address 
and head position. Then retry the original order. 
Repeat this sequence 10 times before considering 


2. The Sense order with a byte count of 16 resets these 
the fault irrecoverable. 


failure indicators that otherwise would remain set after 


the first occurrence of each fault. 
5 Alternate surface selection — program recovery. 


Issue a Header Read order to determine the assigned 
alternate surface address. This action is, of course, 
appropriate only when the header area is used for 
alternate assignment. 


If Sense operations are performed only occasionally after 
faults, the Sense information could contain misleading, past 
history, failure data. 


6 Program notification — no recovery required. The 

program is notified of the following occurrences 

for which a recovery action is not necessarily IRRECOVERABLE ERRORS 

required: 

e A write-protect violation occured on a write- To discuss the specific action to take after an irrecoverable 
protected surface. error falls outside the scope of this manual, for the action 

varies with the order and the user's application. For — 

e <A header flaw byte was detected during a instance, the system may tolerate sense failures, whereas 

Header Read operation. read failures can cause an action range from job abortion 
: | to system shutdown. Irrecoverable write failures may 

e An incorrect length indication appeared dur- merely require the choice of another surface area and the 
ing an operation for which partial information disallowance of further operations on the failing sector (o 
transfer was acceptable. sectors) to remedy the situation. | 
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J. OPERATIONS 


CONTROLS AND INDICATORS 


The disk drive storage unit houses two types of controls 
and indicators: one group for use by the operator, and 
one group for troubleshooting and preventive maintenance 
use by a customer service engineer (CE). The following 
sections describe the two groups. 


_ OPERATOR CONTROL PANEL : 


The operator pushbutton controls and lighted indicators 
are located on a horizontal panel on the front of the disk 
storage unit (see Figure 18). The controls and indicators 
serve these functions: 


Control or 
Indicator Function 
START/READY When all conditions for starting disk 


switch/indicator spin (see below) are satisfied, depres- 
sion causes the disk to start. Depres- 
sion while the disk is spinning causes 
the disk to stop. Illumination of the 
START backlight indicates the disk is 
spinning, whereas illumination of the 
READY backlight indicates the device 


is ready to transfer data. 


These are the conditions for starting 
disk spin: 


e Disk pack is installed. 
e@ Disk pack cover is removed. 
e@ Storage unit top cover is closed, 


e Carriage is retracted. 


Figure 18. Disk Drive Operator Control Panel 


Control or 


Indicator 


FAULT switch/ 


indicator 


READ ONLY 
switch/indicator 


ATTENTION 


switch/indicator 


Function 


e = Air flow is normal. 
e@ Temperature is normal. 
e AC and DC power are ON. 


Illumination of the FAULT backlight 
indicates a fault condition has occurred 
and must be cleared before the device 
will become operational. Momentary 
depression causes the following actions: 


@ Resets any nonpersistent fault con- 
dition. 


s Resets device release and attention 
interrupt flag bit if it is set. 


e@ Causes the device to report "not op- 
erational" during the duration of 
the depression. 


e@ Terminates any function currently 
in process. 


Illumination of the READ ONLY back- 
light indicates the device is write- 
protected, Alternate action switch. 
Depression inhibits writing on the en- 
tire pack. Depression while the pack 
is write-inhibited releases the write- 
inhibition, 


Illumination of the ATTENTION back- 
light indicates that the attention inter- 
rupt bit has been set and will remain 
set until the controller (or both control- 
lers if dual access is in effect) resets 
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Control or 
Indicator 


ATTENTION 


switch/indicator 
(cont. ) 


Unit Number 


Function 


the bit. Once set and reset, the atten- 
tion interrupt bit cannot be set again until 
the disk has been stopped and restarted. 


When the spindle is stopped, momentary 
depression of the switch causes the 
attention bit in the device operational 
status byte (inaccessible to the pro- 
grammer) to be turned on when the 
device becomes operational. 


This interchangeable plug—in device 
assigns the disk a logical unit ad- 
dress. Unit addresses 0 through 14 
are available. 


CE MAINTENANCE PANEL 


Figure 19 depicts the CE maintenance panel located behind 
the rear panel of the disk drive storage unit. The operator 
is concerned with only these three controls located on the 
lower third portion of the panel: VOLTAGE MARGIN, 
DEVICE CONTROL, and POWER CONTROL. See "Disk 
Drive Power Turn On" for a description of their settings in 
that procedure. 


The operator is also concerned with the MAIN, SERVO, 

and SPINDLE circuit breakers located to the left of the 

CE maintenance panel on the AC entry panel, servo panel, 

and motor control panel, respectively. These circuit breakers 
are switched ON for disk drive power turn on, and the 

MAIN circuit breaker is switched OFF for disk drive power 
turn off, 


Figure 19, Disk Drive CE Maintenance Panel 
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OPERATING PROCEDURES 


The following sections describe the day-to-day operations 
on the disk controller and disk drives, and the procedures 
for taking care of the disk packs. 


Note: Disk packs must be initialized before they can be 
used. See, for example, the discussion of volume 


initialization in the Xerox UTS/SM Reference Man- 
val (90 16 74). 


DISK PACK INSTALLATION 


This is the procedure for installing a disk pack: | 


1. Open the top door on the disk drive. A spindle lock 
mechanism will be activated when the door is opened. 
This locking mechanism holds the spindle stationary 
while the disk pack is being inserted (see Figure 20. ) 


Figure 20. Opening Top Door on Disk Drive 


2. Lift the disk pack by the top canister handle. Remove 
the bottom cover of the canister by unscrewing the 
knob in the center of the bottom cover. Set the bot- 
tom cover aside. (See Figures 21 and 22. ) 


3. Carefully position the disk pack onto the spindle. 


4, Turn the top canister handle clockwise until you feel 
a positive stop. 


Note: Should the canister release early from the disk 
pack, continue turning the canister handle 


until you do feel the stop. 


Figure 21. Lifting Disk Pack by Top Canister Handle 


Figure 22, Removing Bottom Can 


ister Cover 


Carefully lift the top canister cover clear of the disk 


pack and rejoin it with the bottom 
(See Figure 23. ) 


Close the top door on the disk drive. 


Enter the disk pack identifier in the 
log. 


canister cover. 


disk pack usage 


Operating Procedures 4] 


5. See Figure 25. Set the appropriate CONTROLLER 
POWER circuit breaker to ON. Now the controller 
fans will come on and the power supply AC lamp will 
light. 


6. See Figure 26. Close the swing frame and set the con- 
troller VOLTAGE MARGIN switch to NORM. 


Figure 23. Removing Top Canister Cover | we ial 
from Installed Disk Pack | pene wouns | 


SYSTEM POWER TURN ON 


A 
To power-on the entire removable disk system, perform both OREN TROULER 
the controller power turn on procedure and the disk drive 
power turn on procedure described forthwith. Note that 
turning on the power of an individual disk drive or control- 
ler ought not affect the rest of the removable disk system. 
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CONTROLLER POWER TURN ON 


This is the procedure for turning on the power of a disk con- 
troller (see Figure 24); 


1. Open the front door on the controller and swing open 
the swing frame. 


2. Set the PT38 power supply circuit breaker (CB1) to ON. 
3. Set the SET/RESET switch to SET. 


4, Set the CABINET POWER circuit breaker to ON, 


Figure 24, Controller AC, DC Power Panel Figure 25. Controller Cabinet Power Panel 
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Figure 26. Controller Maintenance Panel - 


(see Figure 27): 


1. 


Open the front panel of the disk drive and slide out 
the PT38 power supply assembly. 


close the front and rear panels. 


DISK DRIVE START UP PROCEDURE 


7. Set the POWER switch on the maintenance panel to 5. Set the MAIN circuit breaker (AC entry panel) to ON. 
REMOTE. When the remote power sequencing becomes The AC lamp on the power supply assembly (front of | 
enabled, the power supply DC lamp and the controller disk drive) will light and the logic chassis fans will ' 
POWER lamp will light and the controller will go on- come on, 
line if the MODE switch is in the ONLINE position. 

: 6. When the controller sequence power becomes available, 

8. Set the MODE switch to ONLINE. the DC lamp on the power supp ry assembly will HOM 

9. Close the front door on the controller. 7. Set the SERVO circuit asec ere panel) to ON. 

DISK DRIVE POWER TURN ON 8. ete SPINDLE circuit breaker (motor control panel) 

This is the procedure for turning on the power of a disk drive 9, - Slide in the power sunnhtcceembiys Greni’ of anit, and 


2. Set the power supply circuit breaker (CB1) to ON. 
Note that this circuit breaker is ordinarily never turned The following recommended procedure is for starting up a 
Orr. disk drive: ; 
3. Set the SET/RESET switch to SET. 1. Perform the disk pack installation procedure (see "Disk 
| Pack Installation"). 
4. Open the rear panel of the disk drive and position the - 
maintenance panel switches (see Figure 19) as follows: 2. If the FAULT indicator on the operator control panel is 
VOLTAGE MARGIN switch to NORMAL; DEVICE lighted, clear any existing nonpersistent fault by de- 
CONTROL switch to A, B, or BOTH, as applicable; pressing the FAULT switch. However, for any indica- 
POWER CONTROL switch to REMOTE. tion of a persistent fault, immediately notify your CE 
: or supervisor. 

3. The disk drive will complete the first seek ("first seek" 
means the heads are automatically loaded to the flying 
position and then returned to track zero). It is optional 
to depress the ATTENTION switch to signal the con- 
troller that a new disk drive and pack have joined the 

removable disk system — the drive will be automatically 
o connected to the disk system. 
INHIB 4. Depress the START switch to'start the device — the | 


var ¢ 


START indicator will light. 


This then is the sequence in which the disk comes up to oper- 
ational force. If all conditions for starting the disk drive 


Figure 27. Disk Drive Power Assembly Panel 


| 
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are present (refer back to the description of the START/ 
READY switch/indicator in "Operator Control Panel"), 
the mounted disk pack will come up to required rotational 
speed and the brush cycle will begin. In the brush cycle, 
the brush carriage simultaneously sweeps 20 disk brushes 
(one brush per recording surface) across the disk surfaces 
to loosen any foreign material that may have accumulated 
there. When the brush cycle completes, the heads will 
load and the disk drive becomes operational, providing 
the servo system is operational and there are no existing 
fault conditions. 


In summary then, these conditions must be satisfied before 
the controller can be allowed to operate the device: 


o AC and DC power are ON. 


o The heads have loaded, there are no fault conditions, 
and the first seek is completed. 


o. The device is not in the maintenance mode. 


The READY indicator will now light. 


DISK DRIVE STOPPING PROCEDURE 

This procedure stops a disk drive: 

1. Depress the START switch on the operator control panel 
to stop the rotating disk. 


2. Wait until the disk pack stops spinning (approximately 
30 seconds — START light goes off). 


3. Open the top door of the disk drive. 


4, Remove the disk pack (see "Disk Pack Removal" below, 
for the appropriate procedure to use). 


5. Either close the top door of the disk drive or install a 
new disk pack and start up the drive again (see "Disk 
Drive Start Up Procedure"), as applicable. 


SYSTEM POWER TURN OFF 


To power-off the entire removable disk system, perform 
both the controller power turn off procedure and the disk 
drive power turn off procedure described below. Nofe 
that turning off the power of an individual disk drive or 
controller ought not affect the rest of the removable disk 
system, 


CONTROLLER POWER TURN OFF 


This is the procedure for turning off the power of a disk 
controller (see Figure 25): 


1. Open the front door on the controller and swing open 
the swing frame. 


2, Set the applicable CONTROLLER POWER circuit 
breaker to OFF, 
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DISK DRIVE POWER TURN OFF 


This procedure turns off the power of a disk drive (see Fig- 
ures 18 and 19): 


1. Depress the START switch on the operator control panel 
and wait for the disk pack to stop spinning (START 
light is off), 


2. Open the rear panel on the disk drive andset the MAIN 
circuit breaker to OFF. 
DISK PACK REMOVAL 
This is the procedure for removing a disk pack: 


1, Observe that the disk pack is not spinning (START light 
is off), 


2. Open the top door on the disk drive. 

3. Separate the top and bottom canister covers. 

4, Carefully place the top canister cover over the disk 
pack so that the post protruding from the center of the 
disk pack is received into the top canister handle, 

5. Turn the canister handle counterclockwise until you 
hear a clicking sound. This sound means the disk pack 


is secured to the top canister cover. (See Figure 28. ) 


6. Carefully lift the canister and disk pack clear of the 
disk drive. 


7. Close the top door of the disk drive. 


8. Secure the bottom cover of the canister to the disk 
pack, 


Figure 28. Removing Disk Pack 


THE CARE AND MAINTENANCE OF DISK PACKS 


Disk packs are precision devices. With proper care, hand- 
ling, and storage they can have long and useful lives, and 
the installation can be assured of the integrity of the data 
recorded on them. 


HANDLING 
Always follow these precautions when handling disk packs: 


1. Handle a disk pack with the canister (both top and 
bottom covers) attached, except, necessarily of course, 
while installing or removing the disk pack. 


2. Never touch a disk surface with your fingers, or with 
pencils, clothing, or any other objects. 


3. Be especially careful when installing or removing a 
pack from a drive unit to avoid damaging the disks or 
pack hub by rough handling. 


4, Do not drop a disk pack. Misalignment of the surfaces 
with the heads most assuredly can occur. Should you 
drop a disk pack, immediately inspect it for damage 
(see "Inspection"), 


5. When stopping a disk drive (see "Disk Drive Stopping 
Procedure"), do not try to "help" the disk to stopspin- 
ning by pressing on the top disk — wait until the disk 
stops by itself. 


6. Be especially careful to keep ashes, tobacco, and 
coffee away from disk packs — ashes, tobacco and 
sugar are prime sources of disk contamination. 

7. Before using a disk pack, condition it to machine room 
temperature for a minimum of two hours. 

LABELING 


There are certain rules to follow in labeling a disk pack. 


1. Use only the center trim shield of the disk pack for 
labeling. 


2. Use only labels designed for use as disk pack labels. 


3. Do not use grease pencils, crayons, or pencils to write 
on labels — use ball point pens or felt tip pens. 


4. Write label identification on a label before affixing 
it to the disk pack. In this way there is no danger of 
your bending the top disk from hand and arm pressure 
while writing on the label. 


5. Do not apply a new disk pack label over an old one — 
remove the old label first. 


6. Do not try to erase the information on a label to cor- 
rect it — remove the label and apply a new one. 


7. Remove any gummy residue left from an old label with 
91 percent isopropyl alcohol and a lint-free cloth (or 
Kimwipes” ) before affixing a new disk pack label. 


8. Do not put notes, markers, identification cards, etc. 
inside a disk pack. 


INSPECTION 


Note: Use only Model 7264 disk packs or packs that meet 


Xerox specifications. 


When a disk pack is received, and every time a disk pack 
is to be installed on a drive unit, the pack must be inspec- 
ted for possible damage. A damaged disk pack can cause 
head-to-disk interference (a head crash), and because a 
pack can be used on any number of disk drives, a single 
defective pack or drive unit can spread a malfunction to 
all drives and packs. Use the following recommended pro- 
cedure to inspect a disk pack for damage before installing 
it on a disk drive unit: 


1. Remove the bottom canister cover and carefully set it 
aside. 


2. Turn the pack upside down and hold it level so that 
you can spin the pack freely inside the top canister 
cover — apply the spinning force to the center hub, 
not to the disk. 


3. While the pack isspinning, visually inspect it for ex- 
cessive up and down motion (runout) of any of the re- 
cording disks or the sector disk. If you do note runout, 
bring the defective pack to the attention of the CE or 
your supervisor. 


Caution: Under no circumstance allow the read/write 
heads to load on a defective disk pack — 
the heads will be damaged. 


4. If the pack passes visual inspection, install it on a disk 
drive unit and depress the START switch. 


5. Listen as the cleaning brushes move across the pack. 
If you hear any noise, this means a brush arm is con- 
tacting a disk surface. Stop the pack and immediately 
bring the problem to the attention of the CE or your 
supervisor. 


6. Should the pack pass the brush test, continue as fol- 
lows: As a final test after the heads have loaded, listen 
for any head-to-disk contact. If you hear contact, 
stop the pack immediately and notify a CE or your 
supervisor. 


Kimwipes is a registered trademark of the Kimberly-Clark 
Corporation. 
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Should the pack pass inspection, it can safely be used. If 
there is head-to~disk interference, under no circumstance 
install the pack on another disk drive or another pack on 
this same disk drive, for- both the original pack and drive 
“may have sustained damage that can be passed to other 
packs and drives. 


FILTER REPLACEMENT 


Disk packs are fitted with an air filter made of mesh nylon 
in a plastic frame (see Figure 29). The filter is located in 
the base of the hub and is secured in place by an "O" ring 
(see Figure 30). In normal use, a filter must be replaced 
monthly to maintain a clean disk pack. More frequent re 
placement may be necessary, depending upon the number 
of operating hours and the environment, 


Figure 29, Disk Pack Filter 


Figure 30, Location of "O" Ring on Filter 
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Filter Removal. This is the procedure for removing a filter 


from a disk pack for inspection or replacement: 


1. Remove the bottom canister cover and set it aside. For 
location of a filter, see Figure 29, 


2. With your thumb and index finger, squeeze the "O" 
ring, which secures the filter in place, with a sliding 
motion so that the ring stretches in one direction, form- 
ing a gap between the ring and the hub. Remove the 
ring from the hub. (See Figure 31. ) 


Caution: Do not use any sharp instrument to remove 
the "O" ring —a sharp instrument can punc- 
ture the filter or generate contamination by 
abrading the hub. 


3. Remove the filter from the hub. (See Figure 32. ) 


Filter Installation. This is the procedure for replacing or 
installing a fresh filter: | | 


1. Slide the filter over the bottom of the hub and seat it 
below the "O" ring groove. 


2. Hook a portion of the ring into the groove. Slightly 
stretch the ring around the hub, and seat the ring into 
the ring groove. 


Caution: Do not roll the "O" ring into its groove — 
this can result in a twisted ring that can 
come loose during machine operation. 


3. Replace the bottom canister cover on the disk pack. 


Figure 31. Removing "O" Ring 


4. Clean the shroud with the lint-free cloth (or Kimwipes) 
slightly dampened with alcohol. Wipe the shroud to 
remove all dirt and smudges. Thoroughly wipe the | 
spindle surface. | 


5. After cleaning the shroud, use a pad of adhesive-type 
tape to pick up any particles that were not removed 
with the dampened cloth, 


6. Make certain that all particles have been removed 
from the interior of the shroud by rewiping the shroud 
with the alcohol-dampened cloth. 


Only competent maintenance personnel (e.g., customer 
service engineers) must be allowed to clean disk pack re- 
cording surfaces, The disk surfaces need be cleaned only 
when the pack is suspected of being the source of errors. 


The procedure for cleaning a pack is available in the appro- 
priate customer service maintenance manual for the custo- 
mer service engineer. 


Figure 32. Removing Disk Pack Filter 


USAGE LOG STORAGE 

A log must be attached to each disk drive unit for identify- These precautions apply to the storage of disk packs: 

ing all packs that have been used on that unit. Because 

one defective pack or drive unit can spread damage to 1. Always store disk packs flat, with the bottom canister 
other units in an installation, it is important to check which cover installed. 

packs have been used when a malfunctioning disk drive 

unit or a defective pack has been discovered, 2. Replace cracked, distorted, or damaged canisters. 

A log entry consists of at least these three items of infor- 3. Do not stack disk packs one upon the other; to do so 
mation: pack identification, and date and time of pack increases the likelihood of their being dropped and 
insertion. therefore damaged. 


4, Do not store disk packs in direct sunlight or in areas 


CLEANING exposed to magnetic fields from transformers, high 
current electric cables, or similar equipment. For 
Disk pack canister covers and hubs, and disk drive shrouds high security storage, observe the same precautions 
and spindles must be checked frequently for contaminants used for storing magnetic tapes or microfilm records. 
and cleaned with 91 percent pure isopropyl alcohol and a 
lint-free cloth (or Kimwipes). This is the procedure for 5. Keep the storage area free of dust and contaminants. 
cleaning a drive unit shroud and spindle: The computer room is the best environment for disk 
pack storage. If during storage (storage conditions, 
1. Stop the spindle motor, nonoperating, are 8 to 80 percent humidity with no 
condensation over a temperature range of -30° to +150°) 
2. Open the top cover of the drive unit. packs are exposed to temperatures of less than 60° or 
more than 90°, recondition the packs to normal com- 
3. Remove the disk pack (see "Disk Pack Removal"). | puter room environment for two hours before use. 
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